Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/01C2346A068B11F1BC83A6C5DAE4EC9C.roa
File: 01C2346A068B11F1BC83A6C5DAE4EC9C.roa (raw, json)
Hash identifier: 4GrU3dea3pBBteCk+wcUG3w5UC1FXBPW1sooz5OsDs0=
Subject key identifier: 0F:A9:4A:3F:37:EE:3E:71:AC:A7:BF:08:8C:95:7C:BE:15:FA:1A:7B
Certificate issuer: /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial: 04ED
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/01C2346A068B11F1BC83A6C5DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 14:15:53 +0000
ROA not before: Tue 10 Feb 2026 14:15:48 +0000
ROA not after: Mon 10 Feb 2031 14:15:48 +0000
asID: 36890
IP address blocks: 41.186.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Validity
Not Before: Feb 10 14:15:48 2026 GMT
Not After : Feb 10 14:15:48 2031 GMT
Subject: CN=698b3d99-1b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:29:6b:83:d1:5f:76:1d:9c:18:57:14:65:
05:dd:34:02:9e:59:c5:43:58:75:fc:14:05:7c:de:
d0:75:1e:d5:af:21:ed:45:68:4d:fe:bd:e9:d8:fb:
ee:94:0c:38:1d:61:12:b7:4f:d3:fa:b8:5c:5c:b7:
64:23:b7:fa:f6:d0:61:e6:e9:1c:4a:00:08:26:cd:
2e:07:d6:d6:6d:33:b3:e7:b2:b9:b8:97:93:cc:4a:
c2:6a:13:9a:e1:04:1e:a0:9b:d4:48:49:e7:40:f1:
32:9f:32:7f:80:bb:8d:83:13:eb:51:22:56:48:bd:
82:9f:13:72:9a:f7:32:a9:8a:1d:7e:43:99:72:7b:
52:2e:54:04:a9:5b:60:5f:6a:5e:cc:fd:d2:88:27:
3e:4d:24:ad:d0:18:f9:f5:8d:d6:10:2a:c0:e7:21:
fd:62:78:24:bb:ce:da:31:3a:56:c2:05:c3:4e:f7:
5f:13:02:d0:a8:b8:d1:1a:98:a0:83:7b:c7:19:af:
78:3a:33:b5:47:24:24:30:bc:67:81:71:4c:c5:a2:
b8:ab:e6:ad:46:0f:c0:2c:db:98:f3:25:1a:ca:e7:
c2:8d:ee:44:30:21:73:f1:1a:ce:e3:4c:98:62:96:
5d:3d:22:e4:e5:bd:df:28:e0:fa:59:7b:58:be:d2:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:4A:3F:37:EE:3E:71:AC:A7:BF:08:8C:95:7C:BE:15:FA:1A:7B
X509v3 Authority Key Identifier:
keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/01C2346A068B11F1BC83A6C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.186.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:6f:11:0e:43:91:69:fe:c3:50:1b:9d:da:2d:05:79:cc:a2:
1a:1a:6e:90:2e:74:79:81:f3:27:1e:d3:f3:a6:88:b1:49:f9:
aa:56:ab:b0:3b:17:bc:dc:b0:25:a8:2e:b7:6f:17:ba:b7:a2:
a0:2a:07:d5:0a:c6:0e:bb:46:2e:37:5b:c7:bd:ec:94:b6:6a:
bc:48:b7:0c:55:a5:d0:e8:db:a9:a6:c1:1c:fa:cb:2c:b2:ed:
cd:57:e6:10:6f:ac:a5:eb:6f:41:c6:4b:ff:0b:ab:6d:66:5f:
71:f4:b0:f6:1c:06:10:d3:b4:29:5e:1d:00:39:c3:4c:e6:71:
8d:8c:f0:ab:34:a7:ad:3a:7a:ae:1d:e4:38:a6:7e:a4:0c:b0:
71:7b:bd:51:e2:96:ae:c6:cd:16:70:e8:f6:61:bc:54:c2:6d:
03:14:31:c3:e8:f9:e6:7b:29:11:36:5d:5c:ea:50:8e:ff:4d:
2f:ea:65:a2:da:bd:26:15:f8:63:e7:a4:c2:11:01:a0:47:f0:
6b:3a:53:12:08:21:62:42:2e:ab:cd:32:23:55:73:4a:6e:cb:
8e:50:f4:cd:3f:ad:e0:14:97:a2:b8:67:6c:b3:ab:20:49:89:
ae:65:be:11:a6:10:70:d9:d2:0f:e4:41:29:49:07:9b:da:5f:
2b:3e:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:37 2026 by rpki-client